# CVEs published 2017-08-17 35 CVEs were published on August 17, 2017: 0 critical, 0 high. Days are UTC. - [CVE-2017-12907](https://cve.now/CVE-2017-12907.md): Cross-Site Scripting (XSS) exists in NexusPHP version v1.5 via the url path to usersearch.php. (no CVSS) - [CVE-2017-12908](https://cve.now/CVE-2017-12908.md): SQL injection vulnerability in takeconfirm.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the conusr para (no CVSS) - [CVE-2017-12909](https://cve.now/CVE-2017-12909.md): SQL injection vulnerability in modtask.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the userid paramete (no CVSS) - [CVE-2017-12910](https://cve.now/CVE-2017-12910.md): SQL injection vulnerability in massmail.php in NexusPHP 1.5 allows remote attackers to execute arbitrary SQL commands via the or parameter. (no CVSS) - [CVE-2017-6710](https://cve.now/CVE-2017-6710.md): A vulnerability in the Cisco Virtual Network Function (VNF) Element Manager could allow an authenticated, remote attacker to elevate privile (no CVSS, Cisco Systems Virtual Network Function (VNF) Element Manager) - [CVE-2017-6767](https://cve.now/CVE-2017-6767.md): A vulnerability in Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to gain higher pr (no CVSS, Cisco Systems Application Policy Infrastructure Controller) - [CVE-2017-6768](https://cve.now/CVE-2017-6768.md): A vulnerability in the build procedure for certain executable system files installed at boot time on Cisco Application Policy Infrastructure (no CVSS, Cisco Systems Application Policy Infrastructure Controller) - [CVE-2017-6771](https://cve.now/CVE-2017-6771.md): A vulnerability in the AutoVNF automation tool of the Cisco Ultra Services Framework could allow an unauthenticated, remote attacker to acqu (no CVSS, Cisco Systems Ultra Services Framework) - [CVE-2017-6772](https://cve.now/CVE-2017-6772.md): A vulnerability in Cisco Elastic Services Controller (ESC) could allow an authenticated, remote attacker to view sensitive information. (no CVSS, Cisco Systems Elastic Services Controller) - [CVE-2017-6773](https://cve.now/CVE-2017-6773.md): A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an aut (no CVSS, Cisco Systems StarOS for ASR 5000 Series Aggregated Service…) - [CVE-2017-6774](https://cve.now/CVE-2017-6774.md): A vulnerability in Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, (no CVSS, Cisco Systems StarOS for ASR 5000 Series Aggregated Service…) - [CVE-2017-6775](https://cve.now/CVE-2017-6775.md): A vulnerability in the CLI of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an aut (no CVSS, Cisco Systems StarOS for ASR 5000 Series Aggregated Service…) - [CVE-2017-6776](https://cve.now/CVE-2017-6776.md): A vulnerability in the web framework of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to conduct a (no CVSS, Cisco Systems Elastic Services Controller) - [CVE-2017-6777](https://cve.now/CVE-2017-6777.md): A vulnerability in the ConfD server of the Cisco Elastic Services Controller (ESC) could allow an authenticated, remote attacker to acquire (no CVSS, Cisco Systems Elastic Services Controller) - [CVE-2017-6778](https://cve.now/CVE-2017-6778.md): A vulnerability in the Elastic Services Controller (ESC) web interface of the Cisco Ultra Services Platform could allow an authenticated, re (no CVSS, Cisco Systems Ultra Services Platform) - [CVE-2017-6781](https://cve.now/CVE-2017-6781.md): A vulnerability in the management of shell user accounts for Cisco Policy Suite (CPS) Software for CPS appliances could allow an authenticat (no CVSS, Cisco Systems Policy Suite) - [CVE-2017-6782](https://cve.now/CVE-2017-6782.md): A vulnerability in the administrative web interface of Cisco Prime Infrastructure could allow an authenticated, remote attacker to modify a (no CVSS, Cisco Systems Prime Infrastructure) - [CVE-2017-6783](https://cve.now/CVE-2017-6783.md): A vulnerability in SNMP polling for the Cisco Web Security Appliance (WSA), Email Security Appliance (ESA), and Content Security Management (no CVSS, Cisco Systems Web Security Appliance · Cisco Systems Ema… +1) - [CVE-2017-6784](https://cve.now/CVE-2017-6784.md): A vulnerability in the web interface of the Cisco RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers could allow an unauthenticated, remo (no CVSS, Cisco Systems RV340, RV345, and RV345P Dual WAN Gigabit VPN…) - [CVE-2017-6785](https://cve.now/CVE-2017-6785.md): A vulnerability in configuration modification permissions validation for Cisco Unified Communications Manager could allow an authenticated, (no CVSS, Cisco Systems Unified Communications Manager) - [CVE-2017-6786](https://cve.now/CVE-2017-6786.md): A vulnerability in Cisco Elastic Services Controller could allow an authenticated, local, unprivileged attacker to access sensitive informat (no CVSS, Cisco Systems Elastic Services Controller) - [CVE-2017-6788](https://cve.now/CVE-2017-6788.md): The WebLaunch functionality of Cisco AnyConnect Secure Mobility Client Software contains a vulnerability that could allow an unauthenticated (no CVSS, Cisco Systems AnyConnect WebLaunch) - [CVE-2017-6790](https://cve.now/CVE-2017-6790.md): A vulnerability in the Session Initiation Protocol (SIP) on the Cisco TelePresence Video Communication Server (VCS) could allow an unauthent (no CVSS, Cisco Systems TelePresence Video Communication Server) - [CVE-2017-7555](https://cve.now/CVE-2017-7555.md): Augeas versions up to and including 1.8.0 are vulnerable to heap-based buffer overflow due to improper handling of escaped strings. (no CVSS, Red Hat augeas) - [CVE-2017-7556](https://cve.now/CVE-2017-7556.md): Hawtio versions up to and including 1.5.3 are vulnerable to CSRF vulnerability allowing remote attackers to trick the user to visit their we (no CVSS, Red Hat hawtio · io.hawt:project) - [CVE-2011-0469](https://cve.now/CVE-2011-0469.md): Code injection in openSUSE when running some source services used in the open build service 2.1 before March 11 2011. (no CVSS, Micro Focus openSUSE) - [CVE-2017-11661](https://cve.now/CVE-2017-11661.md): The \_WM\_SetupMidiEvent function in internal\_midi.c:2318 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application (no CVSS) - [CVE-2017-11662](https://cve.now/CVE-2017-11662.md): The \_WM\_ParseNewMidi function in f\_midi.c in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application crash) via a (no CVSS) - [CVE-2017-11663](https://cve.now/CVE-2017-11663.md): The \_WM\_SetupMidiEvent function in internal\_midi.c:2315 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application (no CVSS) - [CVE-2017-11664](https://cve.now/CVE-2017-11664.md): The \_WM\_SetupMidiEvent function in internal\_midi.c:2122 in WildMIDI 0.4.2 can cause a denial of service (invalid memory read and application (no CVSS) - [CVE-2017-12441](https://cve.now/CVE-2017-12441.md): The row\_is\_empty function in base/4bitmap.c:274 in minidjvu 0.8 can cause a denial of service (invalid memory read and application crash) vi (no CVSS) - [CVE-2017-12442](https://cve.now/CVE-2017-12442.md): The row\_is\_empty function in base/4bitmap.c:272 in minidjvu 0.8 can cause a denial of service (invalid memory read and application crash) vi (no CVSS) - [CVE-2017-12443](https://cve.now/CVE-2017-12443.md): The mdjvu\_bitmap\_pack\_row function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service (invalid memory read and application cras (no CVSS) - [CVE-2017-12444](https://cve.now/CVE-2017-12444.md): The mdjvu\_bitmap\_get\_bounding\_box function in base/4bitmap.c in minidjvu 0.8 can cause a denial of service (invalid memory read and applicat (no CVSS) - [CVE-2017-12445](https://cve.now/CVE-2017-12445.md): The JB2BitmapCoder::code\_row\_by\_refinement function in jb2/bmpcoder.cpp in minidjvu 0.8 can cause a denial of service (invalid memory read a (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2017-08-17 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.